“The mother of all password leaks” emerged last night. At least that’s what the portal says Cybernewswhich, together with security researcher Bob Diachenko, discovered a database with 26 billion (!) records.
The size is the one MOAB (»Mother of all Bombs«) The similar name is not surprising, as it would be the largest data leak of all time. Now that sounds scary at first, but luckily you don’t have to panic – but you shouldn’t ignore the story completely either.
Sequentially: On X (formerly Twitter), security expert Bob Diachenko commented on an open database that was discovered together with the Cybernews team.
This was probably found when scanning IPv6 addresses, as the researchers asked when asked Heise announced. Given this, the creator of the database will probably never be identified.
Link to Twitter content
First was supposedthat due to the sheer size of the data leak, “newly captured” data sets may also be included.
It contains, among other things, several hundred million log-in data from Twitter, LinkedIn and Adobe. The Chinese portals Tencent and Weibo alone account for two billion data records.
Like Troy Hunt, the founder of the website that is often used in such security cases »HaveIBeenPwned« (HIBP) is explained on platform X, at least initially All clear hip, trendy, popular.
Because according to his analysis The MOAB leak is a “personal database” of a person who handles the leaked data. Whether it is legitimate, as in the case of HIBP, or as a kind of “search engine” on less moral sites remains an open question.
Accordingly, Hunt assumes that no new passwords can be found in the published Cybernews database. There is also a search mask in the portal where you can check whether one of the websites you use can be found in the collection.
So what applies to you? Basically the same thing that always applies: change your passwords if necessary, don’t use them on multiple sites and, if possible, use two-factor authentication (2FA) to protect yourself. The news about the “mother of all password leaks” is definitely another good reason to check your log-in data.